Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authenticated, the attacker can access the PostgreSQL database with superuser privileges, create administrative users for the web interface, and potentially escalate privileges further.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RUCKUS Network Director 安全漏洞
Vulnerability Description
RUCKUS Network Director是RUCKUS公司的一个无线网络监控软件。 RUCKUS Network Director 4.5.0.56之前版本存在安全漏洞，该漏洞源于OVA设备包含硬编码的SSH密钥，可能导致未经密码认证的SSH访问并获取数据库超级用户权限。
CVSS Information
N/A
Vulnerability Type
N/A